The vulnerability resides in the Linux kernel's per‑CPU memory allocator. During chunk allocation, the function pcpu_create_chunk() uses the total page count to set a bitmap that should only track a single unit's pages. When more than one unit is allocated, the bitmap is written beyond its bounds, corrupting adjacent kernel memory. This corruption can potentially overwrite critical data structures, allowing a local attacker to gain elevated privileges or force a system crash.

All Linux kernel releases that contain the buggy percpu‑km implementation but have not yet incorporated the fix installed in the commit that corrects the bitmap handling. The advisory does not specify exact kernel versions, so any host running a kernel built before the patching commit is considered potentially vulnerable.

The patch is not listed in the CISA KEV catalog and the EPSS score is not available, so a baseline probability of exploitation cannot be quantified. The flaw requires an attacker to trigger per‑CPU memory allocation inside the kernel, implying a local or compromised privilege attack vector. If exploited, the buffer overflow could lead to privilege escalation or denial of service; therefore the theoretical severity is high but realistic exploitation depends on the attacker's ability to trigger the flawed allocation.